Goldman Sachs trusts Sysdig to advance its ability to monitor and secure its extensive IT environment. Given Goldman Sachs’ role in a highly regulated industry, maintaining strict compliance and security is crucial. Sysdig’s comprehensive solutions are essential for effectively monitoring containerized applications and data within their cloud environment. With Sysdig, Goldman Sachs can track applications and data at scale, ensuring robust security and compliance. Sysdig’s advanced tools enable Goldman Sachs to manage everything from monitoring and troubleshooting to threat detection and auditing. This partnership supports Goldman Sachs’ need for reliability and efficiency while meeting stringent regulatory requirements. Here are the top five reasons why a Fintech Giant like Goldman Sachs prefers Sysdig.
Top 5 Reasons Why Goldman Sachs Uses Sysdig
1. Monitoring Applications at Massive Scale with Sysdig Monitor
Sysdig Monitor is employed by the central monitoring team at Goldman Sachs to automatically detect and monitor hosts, containers, and orchestrators in a multi-cloud environment that is both highly dynamic and immensely scalable. The team can effortlessly identify applications and containers in both public and on-premises infrastructures. The telemetry collected at an unprecedented scale, querying millions of containers per second, encompasses application, infrastructure, and process-level activity.
Goldman Sachs is capable of creating custom service connection maps that identify containers and processes associated with a specific application and specify which services communicate with other services, utilizing enormous data. Furthermore, these maps are enhanced with granular activity data, which aids in the identification and resolution of issues throughout the hierarchy.
2. Auditing and Forensics Records for Ephemeral Workloads
Goldman’s strategy is significantly facilitated by the data collected by Sysdig for audit and forensics. These data sources enable analysts to observe user and system activity from the instant an event occurs. This encompasses the execution of user commands, the establishment or attempt of every network connection, and the capacity to investigate any I/O activity, even if the host is no longer operational. In the future, the SIRT intends to employ Sysdig Secure to monitor containers in addition to the current host monitoring program for security events and compliance.
Sysdig Secure’s 30+ built-in detections are utilized by the incident response team to derive immediate value.
Sysdig data guarantees that Goldman Sachs maintains an exhaustive record of its activities and can reconstruct events at a granular level for auditing purposes.
3. Increase the Speed of Incident Response and Remediation
Goldman Sachs has considerably enhanced the efficiency of its DevOps teams as a result of cloud-native technology. By implementing containers, the organization has expedited software development, simplified infrastructure management, and automated business continuity. Simultaneously, security and compliance procedures have been required to undergo modifications in order to remain viable. Goldman Sachs is unable to operate its business without the appropriate instruments to guarantee visibility.
In late 2016, Goldman Sachs initiated a comprehensive technology evaluation with Sysdig to ascertain whether it was a suitable match for the firm’s distinctive set of requirements. Goldman Sachs discovered that Sysdig provided the requisite visibility while integrating security and compliance into the company’s DevOps workflows. Sysdig enables the organization to address a multitude of use cases, including monitoring, troubleshooting, scanning, compliance, threat detection, and auditing, on an enormous scale.
In order to monitor and secure its environment at scale, Goldman Sachs employs Sysdig to provide support to a population of over 9,000 developers.
Read: Fintech Marketing: Top 10 Power Strategies to Accelerate Growth
4. Detecting Top Talkers and Rogue Connections in Clouds
The monitoring team monitors millions of network connections between entities, data centers, regions, and clouds using Sysdig, and subsequently assigns network usage to containers. Goldman Sachs can operate more efficiently by identifying the processes and containers that generate the most discussion.
- Isolate applications that consume the most network data.
- Recognize connections that are not legitimate and may suggest a security breach.
- Improve capacity planning by attributing container processes to network usage.
- Conduct troubleshooting to optimize availability.
5. Helps Access to Security Detection Policies With Sysdig Secure
Goldman Sachs has access to security detection policies and complete visibility into process, file, network I/O, and user activity with Sysdig Secure. Goldman Sachs is able to identify potential indicators of compromise and common misbehaviors through the use of both out-of-the-box and customizable rules. Furthermore, the security team is able to capitalize on the most recent detections provided by the Sysdig threat research team and community-driven rules. Aligning the security team with a standard is an essential component of any effective security strategy. The MITRE ATT&CK framework was employed by the Goldman Security Incident Response Team (SIRT) to compare tools and align detection strategies during its selection process.
Read: Top 10 Neobank Companies of the Fintech World
Among the open-source solutions that Goldman Sachs assessed were Falco, the open-source cloud-native runtime security project that was initially developed by Sysdig, as well as extant logging tools. The SIRT determined that the set of detections necessitated could not be adequately supported by recording following its assessment. Goldman discovered that Sysdig Secure, which is built on Falco, enhanced the organization’s capacity to identify incidents and utilize contextualized granular data to respond promptly. The team’s efficiency and confidence were enhanced by robust detection that reduced the cacophony of false positives.
Read: Top 5 Ways How Sysdig Can Help To Stay Compliant Without Sacrificing Security
Wrapping Up
Sysdig provides Goldman Sachs with essential tools to manage and secure its vast digital infrastructure. The ability to monitor applications at a massive scale, conduct thorough audits, and respond quickly to incidents is vital for maintaining the firm’s high standards of security and compliance. Sysdig’s capabilities enhance Goldman Sachs’ operational efficiency and security posture, making it a valuable partner in navigating the complex landscape of cloud-native technologies. With Sysdig, Goldman Sachs is well-equipped to address its diverse needs and ensure continued success in a regulated environment.
We will be back with more exciting articles in the fintech domain!
Write to us for any suggestions.